// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / Al Jazeera
Breach Record

Al Jazeera

DISCLOSED 2026-10-19 · MALWARE

Citizen Lab traced Candiru spyware infections at Al Jazeera to targeted advertisements. The spyware was delivered via a zero-click exploit, requiring no user interaction. The attack exposed Al Jazeera to surveillance and data theft.

The record

What we know

Disclosed
2026-10-19
Attack vector
Malware
Sector
Media
Country
Qatar
ENDPOINT INVOLVED
ColdRecon assessment

Could a positive-security control have prevented this?

Verdict · unclear · opinion

A positive-security model might have prevented the spyware installation if it blocked unauthorized code execution, but zero-click exploits often bypass such controls by exploiting legitimate processes.

Our assessments are opinion, grounded in the cited public facts. Read them critically.

Sources

Cited reporting

Similar vector · recent

Other malware breaches on file

This page is the permanent ColdRecon entry for the Al Jazeera disclosure. It updates if new public reporting emerges. All tracked breaches →

Al Jazeera just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →